Lucene search
+L

CVE-2025-11230

🗓️ 19 Nov 2025 09:28:39Reported by canonicalType 
cve
 cve
🔗 web.nvd.nist.gov👁 57 Views

DoS in HAProxy mjson library due to an inefficient algorithm; attackers trigger with crafted JSON.

Related
Detection
Affected
Refs
NVD
Node
OR
haproxyaloha_applianceRange14.5.014.5.33
haproxyaloha_applianceRange15.5.015.5.28
haproxyaloha_applianceRange16.5.016.5.19
haproxyaloha_applianceRange17.0.017.0.7
haproxyhaproxyRange2.4.02.4.30
haproxyhaproxyRange2.6.02.6.23
haproxyhaproxyRange2.8.02.8.16
haproxyhaproxyRange3.0.03.0.12
haproxyhaproxyRange3.1.03.1.9
haproxyhaproxyRange3.2.03.2.6
haproxyhaproxy_enterpriseMatch2.4r11.0.0-253.271
haproxyhaproxy_enterpriseMatch2.4r11.0.0-254.271
haproxyhaproxy_enterpriseMatch2.4r11.0.0-259.342
haproxyhaproxy_enterpriseMatch2.4r11.0.0-263.343
haproxyhaproxy_enterpriseMatch2.4r11.0.0-264.356
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.356
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.373
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.459
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.464
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.477
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.499
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.553
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.560
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.564
haproxyhaproxy_enterpriseMatch2.4r11.0.0-268.596
haproxyhaproxy_enterpriseMatch2.4r11.0.0-269.596
haproxyhaproxy_enterpriseMatch2.4r11.0.0-269.599
haproxyhaproxy_enterpriseMatch2.4r11.0.0-270.616
haproxyhaproxy_enterpriseMatch2.4r11.0.0-271.673
haproxyhaproxy_enterpriseMatch2.4r11.0.0-271.677
haproxyhaproxy_enterpriseMatch2.4r11.0.0-272.683
haproxyhaproxy_enterpriseMatch2.4r11.0.0-272.686
haproxyhaproxy_enterpriseMatch2.4r11.0.0-272.728
haproxyhaproxy_enterpriseMatch2.4r11.0.0-274.752
haproxyhaproxy_enterpriseMatch2.4r11.0.0-276.752
haproxyhaproxy_enterpriseMatch2.4r11.0.0-277.814
haproxyhaproxy_enterpriseMatch2.4r11.0.0-277.831
haproxyhaproxy_enterpriseMatch2.4r11.0.0-278.838
haproxyhaproxy_enterpriseMatch2.4r11.0.0-279.852
haproxyhaproxy_enterpriseMatch2.4r11.0.0-279.859
haproxyhaproxy_enterpriseMatch2.4r11.0.0-279.877
haproxyhaproxy_enterpriseMatch2.4r11.0.0-279.911
haproxyhaproxy_enterpriseMatch2.4r11.0.0-279.940
haproxyhaproxy_enterpriseMatch2.4r11.0.0-279.952
haproxyhaproxy_enterpriseMatch2.4r11.0.0-279.953
haproxyhaproxy_enterpriseMatch2.4r11.0.0-279.956
haproxyhaproxy_enterpriseMatch2.4r11.0.0-280.956
haproxyhaproxy_enterpriseMatch2.4r11.0.0-282.998
haproxyhaproxy_enterpriseMatch2.4r11.0.0-282.999
haproxyhaproxy_enterpriseMatch2.4r11.0.0-284.999
haproxyhaproxy_enterpriseMatch2.4r11.0.0-285.1010
haproxyhaproxy_enterpriseMatch2.4r11.0.0-286.1064
haproxyhaproxy_enterpriseMatch2.4r11.0.0-286.1068
haproxyhaproxy_enterpriseMatch2.4r11.0.0-286.1089
haproxyhaproxy_enterpriseMatch2.4r11.0.0-286.1094
haproxyhaproxy_enterpriseMatch2.4r11.0.0-288.1094
haproxyhaproxy_enterpriseMatch2.4r11.0.0-288.1158
haproxyhaproxy_enterpriseMatch2.4r11.0.0-288.1167
haproxyhaproxy_enterpriseMatch2.4r11.0.0-288.1189
haproxyhaproxy_enterpriseMatch2.4r11.0.0-289.1189
haproxyhaproxy_enterpriseMatch2.4r11.0.0-290.1239
haproxyhaproxy_enterpriseMatch2.4r11.0.0-291.1246
haproxyhaproxy_enterpriseMatch2.4r11.0.0-292.1293
haproxyhaproxy_enterpriseMatch2.4r11.0.0-294.1346
haproxyhaproxy_enterpriseMatch2.4r11.0.0-294.1364
haproxyhaproxy_enterpriseMatch2.4r11.0.0-294.1376
haproxyhaproxy_enterpriseMatch2.4r11.0.0-294.1377
haproxyhaproxy_enterpriseMatch2.4r11.0.0-294.1442
haproxyhaproxy_enterpriseMatch2.6r11.0.0-281.466
haproxyhaproxy_enterpriseMatch2.6r11.0.0-282.561
haproxyhaproxy_enterpriseMatch2.6r11.0.0-283.562
haproxyhaproxy_enterpriseMatch2.6r11.0.0-283.565
haproxyhaproxy_enterpriseMatch2.6r11.0.0-283.616
haproxyhaproxy_enterpriseMatch2.6r11.0.0-283.632
haproxyhaproxy_enterpriseMatch2.6r11.0.0-283.633
haproxyhaproxy_enterpriseMatch2.6r11.0.0-283.636
haproxyhaproxy_enterpriseMatch2.6r11.0.0-284.636
haproxyhaproxy_enterpriseMatch2.6r11.0.0-285.726
haproxyhaproxy_enterpriseMatch2.6r11.0.0-285.727
haproxyhaproxy_enterpriseMatch2.6r11.0.0-287.727
haproxyhaproxy_enterpriseMatch2.6r11.0.0-288.770
haproxyhaproxy_enterpriseMatch2.6r11.0.0-288.773
haproxyhaproxy_enterpriseMatch2.6r11.0.0-288.848
haproxyhaproxy_enterpriseMatch2.6r11.0.0-288.849
haproxyhaproxy_enterpriseMatch2.6r11.0.0-289.1020
haproxyhaproxy_enterpriseMatch2.6r11.0.0-289.1028
haproxyhaproxy_enterpriseMatch2.6r11.0.0-289.1041
haproxyhaproxy_enterpriseMatch2.6r11.0.0-289.873
haproxyhaproxy_enterpriseMatch2.6r11.0.0-289.975
haproxyhaproxy_enterpriseMatch2.6r11.0.0-289.976
haproxyhaproxy_enterpriseMatch2.6r11.0.0-291.1046
haproxyhaproxy_enterpriseMatch2.6r11.0.0-292.1046
haproxyhaproxy_enterpriseMatch2.6r11.0.0-292.1055
haproxyhaproxy_enterpriseMatch2.6r11.0.0-292.1120
haproxyhaproxy_enterpriseMatch2.6r11.0.0-292.1147
haproxyhaproxy_enterpriseMatch2.6r11.0.0-292.1148
haproxyhaproxy_enterpriseMatch2.6r11.0.0-292.1156
haproxyhaproxy_enterpriseMatch2.6r11.0.0-292.1181
haproxyhaproxy_enterpriseMatch2.6r11.0.0-292.1187
haproxyhaproxy_enterpriseMatch2.6r11.0.0-293.1189
haproxyhaproxy_enterpriseMatch2.6r11.0.0-293.1190
haproxyhaproxy_enterpriseMatch2.6r11.0.0-294.1212
haproxyhaproxy_enterpriseMatch2.6r11.0.0-294.1285
haproxyhaproxy_enterpriseMatch2.6r11.0.0-295.1303
haproxyhaproxy_enterpriseMatch2.6r11.0.0-296.1392
haproxyhaproxy_enterpriseMatch2.6r11.0.0-296.1416
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1416
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1474
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1487
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1511
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1542
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1557
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1596
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1603
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1606
haproxyhaproxy_enterpriseMatch2.6r11.0.0-299.1618
haproxyhaproxy_enterpriseMatch2.6r11.0.0-300.1666
haproxyhaproxy_enterpriseMatch2.6r11.0.0-301.1666
haproxyhaproxy_enterpriseMatch2.8r11.0.0-302.234
haproxyhaproxy_enterpriseMatch2.8r11.0.0-304.266
haproxyhaproxy_enterpriseMatch2.8r11.0.0-305.279
haproxyhaproxy_enterpriseMatch2.8r11.0.0-305.285
haproxyhaproxy_enterpriseMatch2.8r11.0.0-306.288
haproxyhaproxy_enterpriseMatch2.8r11.0.0-306.289
haproxyhaproxy_enterpriseMatch2.8r11.0.0-307.317
haproxyhaproxy_enterpriseMatch2.8r11.0.0-310.350
haproxyhaproxy_enterpriseMatch2.8r11.0.0-310.364
haproxyhaproxy_enterpriseMatch2.8r11.0.0-310.373
haproxyhaproxy_enterpriseMatch2.8r11.0.0-310.374
haproxyhaproxy_enterpriseMatch2.8r11.0.0-310.418
haproxyhaproxy_enterpriseMatch2.8r11.0.0-310.422
haproxyhaproxy_enterpriseMatch2.8r11.0.0-310.424
haproxyhaproxy_enterpriseMatch2.8r11.0.0-311.449
haproxyhaproxy_enterpriseMatch2.8r11.0.0-311.452
haproxyhaproxy_enterpriseMatch2.8r11.0.0-311.453
haproxyhaproxy_enterpriseMatch2.8r11.0.0-312.592
haproxyhaproxy_enterpriseMatch2.8r11.0.0-312.613
haproxyhaproxy_enterpriseMatch2.8r11.0.0-317.613
haproxyhaproxy_enterpriseMatch2.8r11.0.0-318.674
haproxyhaproxy_enterpriseMatch2.8r11.0.0-319.699
haproxyhaproxy_enterpriseMatch2.8r11.0.0-319.723
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.750
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.761
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.770
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.780
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.781
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.783
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.831
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.851
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.853
haproxyhaproxy_enterpriseMatch2.8r11.0.0-320.895
haproxyhaproxy_enterpriseMatch2.8r11.0.0-321.895
haproxyhaproxy_enterpriseMatch2.8r11.0.0-321.901
haproxyhaproxy_enterpriseMatch2.8r11.0.0-321.919
haproxyhaproxy_enterpriseMatch2.8r11.0.0-321.931
haproxyhaproxy_enterpriseMatch2.8r11.0.0-321.934
haproxyhaproxy_enterpriseMatch2.8r11.0.0-321.937
haproxyhaproxy_enterpriseMatch2.8r11.0.0-322.942
haproxyhaproxy_enterpriseMatch2.8r11.0.0-324.1030
haproxyhaproxy_enterpriseMatch2.8r11.0.0-324.1071
haproxyhaproxy_enterpriseMatch2.8r11.0.0-324.1072
haproxyhaproxy_enterpriseMatch2.8r11.0.0-324.947
haproxyhaproxy_enterpriseMatch2.8r11.0.0-326.1073
haproxyhaproxy_enterpriseMatch3.0r11.0.0-337.363
haproxyhaproxy_enterpriseMatch3.0r11.0.0-337.390
haproxyhaproxy_enterpriseMatch3.0r11.0.0-337.394
haproxyhaproxy_enterpriseMatch3.0r11.0.0-339.395
haproxyhaproxy_enterpriseMatch3.0r11.0.0-339.405
haproxyhaproxy_enterpriseMatch3.0r11.0.0-339.415
haproxyhaproxy_enterpriseMatch3.0r11.0.0-339.455
haproxyhaproxy_enterpriseMatch3.0r11.0.0-339.466
haproxyhaproxy_enterpriseMatch3.0r11.0.0-339.471
haproxyhaproxy_enterpriseMatch3.0r11.0.0-341.475
haproxyhaproxy_enterpriseMatch3.0r11.0.0-342.482
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.495
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.503
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.561
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.564
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.591
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.608
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.641
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.655
haproxyhaproxy_enterpriseMatch3.0r11.0.0-344.672
haproxyhaproxy_enterpriseMatch3.0r11.0.0-345.673
haproxyhaproxy_enterpriseMatch3.0r11.0.0-346.792
haproxyhaproxy_enterpriseMatch3.1r11.0.0-345.233
haproxyhaproxy_enterpriseMatch3.1r11.0.0-346.274
haproxyhaproxy_enterpriseMatch3.1r11.0.0-346.287
haproxyhaproxy_enterpriseMatch3.1r11.0.0-347.299
haproxyhaproxy_enterpriseMatch3.1r11.0.0-347.338
haproxyhaproxy_enterpriseMatch3.1r11.0.0-347.362
haproxyhaproxy_enterpriseMatch3.1r11.0.0-347.405
haproxyhaproxy_enterpriseMatch3.1r11.0.0-347.419
haproxyhaproxy_enterpriseMatch3.1r11.0.0-347.431
haproxyhaproxy_enterpriseMatch3.1r11.0.0-347.449
haproxyhaproxy_enterpriseMatch3.1r11.0.0-348.519
haproxykubernetes_ingress_controllerRange<1.9.14-ee7enterprise
haproxykubernetes_ingress_controllerRange1.10.10-ee11.11.12-ee10enterprise
haproxykubernetes_ingress_controllerRange3.0.0-ee13.0.15-ee4enterprise
[
  {
    "defaultStatus": "unaffected",
    "product": "HAProxy Community Edition",
    "programFiles": [
      "src/mjson.c"
    ],
    "repo": "https://git.haproxy.org/",
    "vendor": "HAProxy Technologies",
    "versions": [
      {
        "lessThan": "2.4.30",
        "status": "affected",
        "version": "2.4.0",
        "versionType": "semver"
      },
      {
        "lessThan": "2.6.23",
        "status": "affected",
        "version": "2.6.0",
        "versionType": "semver"
      },
      {
        "lessThan": "2.8.16",
        "status": "affected",
        "version": "2.8.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.0.12",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.1.9",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.2.6",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:29Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.17.5
EPSS0.00524
SSVC
57